Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File:                     QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier:          NWntgaidQXftzya+ucCGqp+rfRkdKCh0vv6Yu0ggBTM=
Subject key identifier:   B3:BF:0A:86:90:68:D2:71:FC:59:13:E6:88:43:CA:8B:72:D1:91:58
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       01A116AAB4771B2E419BC5BC52188AE18D61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number:          1AAD
Signing time:             Wed 07 Oct 2026 14:00:48 +0000
Manifest this update:     Wed 07 Oct 2026 14:00:48 +0000
Manifest next update:     Thu 08 Oct 2026 14:00:48 +0000
Files and hashes:         1: 1-fuWQ0J7N3Mc1-LpV47OkEYJ6Pg.roa (hash: d64kZTOMQS3ywmOiCwM9goS+Zs55OgLIp48OWiE2tqI=)
                          2: 3qCviuOG-ueF_1VEjm9A7m4dsIk.roa (hash: sAL6XW3hWoRAGWp0+zVbTSYYIBh9Tr5DdziSNbosFMc=)
                          3: 4iREikE0FlzD4Lki3jJx6aaj7Ek.roa (hash: R85Lc2X5cjTiidE1qCVwRr469wMVOizgeXCdlpP24Do=)
                          4: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (hash: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=)
                          5: 891fnCNTe0IKQYnO-ZqvxNgk-7k.roa (hash: VPRQl1y1jooeZjbup+JMP7DkoiYT1QAj+vISvPCzQ5U=)
                          6: Amhr13WKOrupDvbNhR-H8uA8vnQ.roa (hash: DunPwzqrWTpngKU5F7a27cbOD9P4pJ+IEPvx/MUiLIg=)
                          7: CBtEHJaHzVeN2D-IZE6BCv7mSC8.roa (hash: heEBAu3l6Z4RAGafbljD+NgYk3gtGcKPKxmuj7zaY7U=)
                          8: COHOQ0pTO6y5ZuHuUcu-g0ljx0A.roa (hash: 3iSoeAAfCfOb+NUSBX9eLBTd4Tg1kwBpORrV/xahpQk=)
                          9: CRbc03vb_t7S-8OrjziURXlLPLs.roa (hash: AwT4/FD/dxBwMmMETo+hpYLUml8m4wGXejb2vnR3jvE=)
                          10: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (hash: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc=)
                          11: Dq47WCi1_R3R9nKkOKnsCn37r54.roa (hash: 5JD7iNqs4qn/sy+bgp/hKnEbHR2EBc8c01xHZGOpYMA=)
                          12: EiEKEI95auMCB7NfQVwo9byU814.roa (hash: qJa+m44cB1n22XnwN3TBLrmdvt3RH9NDFwUuAESZSTE=)
                          13: JKDe6ScGUf5knBKSEZ3INxcpX_k.roa (hash: cP1FQRZP0bYy6TqBtYSmhv38p8stWSoSv7D1CesDGKo=)
                          14: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (hash: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI=)
                          15: O3ilaHX6VJtoUZBeu1-BglPYb-I.roa (hash: PoRHXYKRSqCrsj4FltoRS6V1gs+nJ0Qsq87ffUhtPkI=)
                          16: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (hash: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y=)
                          17: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: jCfSjBXUhzwWvk270s8xhVTsmDsxyxvfN7Xj6U35EMk=)
                          18: ScQfnaUU4O8vx0n81hUaqb086B8.roa (hash: lNNE6MSkgxUG1XBBRE9DXmRaUozczaM9QmKJs3IX4os=)
                          19: U7Tc0OMn99OVh4UaH8Gir63iiJs.roa (hash: VeiRvPbD+gYEQvLB86zuV+IwSFIqcHPYDQqYvNeKjps=)
                          20: Vr8UKQBR2K4aBwszRxtTMGpM3RU.roa (hash: pBwjHOXlk8Xh2v3/m1xk7uIqqtM9MysBJJTXP9nTkqk=)
                          21: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (hash: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90=)
                          22: cWtnPd8ZvgFa7GRaqMfs10BE4qc.roa (hash: jN/lGIzUOKHwZH6DyNIy+6o9b1TpGieuOJIXydb73lg=)
                          23: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (hash: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA=)
                          24: hkSLq2UREFy1118xumuIZnvQ67Y.roa (hash: SOh35WJM4tvkJo/U2D6+8WiI7UsWl69I9bV1omMOiek=)
                          25: kqgMt21-DFLMw82FOeig-EaUgf0.roa (hash: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM=)
                          26: n3D-Zk4G38G2tBgyUy3hXStCuWg.roa (hash: xWuIVNN480cZZue76BwJppWLzoJjQqcpD9fuq0+OWZ0=)
                          27: q1B4D6fhb1hsDMHl4DgqMg1LBS0.roa (hash: QyvrcsEDHcRC23C4LJneKzaSVc+UGnP9rW3V3L3o3QM=)
                          28: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (hash: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q=)
                          29: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (hash: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo=)
                          30: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (hash: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs=)
                          31: sJZVmKX-G_XNNEcca8MTXPH-dbc.roa (hash: DQKLyMn35LbEuueIciMk2w6CESjK2ZNYZ5n5ZL//wOw=)
                          32: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (hash: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk=)
                          33: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (hash: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg=)
                          34: xsPphQ3GxyftzicBBiCvf8PWiTg.roa (hash: Lp9WrPLRboL43ORcpzFlINw0fU+XSE3Mcv99YXgLnFI=)
                          35: yfk1E30luISg0XzXUtlJ2MNM9eM.roa (hash: WxN+8AXOM93AE57ePd+WfH578Dm9CftwqJPfTKxDhLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:aa:b4:77:1b:2e:41:9b:c5:bc:52:18:8a:e1:8d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Oct  7 14:00:48 2026 GMT
            Not After : Oct  8 14:00:48 2026 GMT
        Subject: CN=b3bf0a869068d271fc5913e68843ca8b72d19158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:03:cb:a3:fa:45:04:9a:89:f8:d6:31:22:
                    19:69:57:0b:16:8b:3c:ab:13:8d:37:79:eb:e4:46:
                    28:b4:6e:22:f5:74:e0:cc:42:6a:4e:04:a3:3c:8c:
                    18:af:dc:75:80:d6:25:17:79:49:32:70:ad:98:33:
                    19:7f:b4:17:12:dc:e4:c3:9e:22:45:96:b4:c6:9a:
                    e8:41:23:0f:c5:67:ab:3b:7b:2f:a1:88:4b:70:92:
                    19:32:16:36:33:a4:87:df:3c:d8:13:ce:1d:c7:7a:
                    96:86:e0:16:3f:67:ac:07:b2:cb:32:de:c4:8e:3d:
                    47:8d:55:2b:43:77:15:8b:80:12:20:73:ca:78:20:
                    bc:06:14:4e:36:62:a5:8f:6f:dd:d9:d9:17:30:0c:
                    58:d4:52:1a:3c:f2:44:88:6f:44:eb:93:f9:0f:87:
                    e2:73:e3:64:0a:d6:fb:56:f4:7e:ba:83:8f:b1:50:
                    31:e2:89:da:07:5d:8c:3d:3e:ac:f6:24:56:54:0c:
                    81:65:ef:49:2f:a8:05:45:bc:2e:a5:e8:a4:04:28:
                    fb:af:a2:5c:f0:c9:a3:e7:08:c4:fa:dc:74:ea:9c:
                    72:0e:8a:67:db:4d:dc:2c:83:f9:52:1d:b3:ea:43:
                    87:d9:1d:9e:89:fa:ce:14:84:11:58:f9:b4:5f:5f:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BF:0A:86:90:68:D2:71:FC:59:13:E6:88:43:CA:8B:72:D1:91:58
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:69:96:87:8f:4c:e1:12:2a:d8:dc:bf:9a:e7:46:35:49:b5:
         e6:84:34:9e:25:fc:33:a2:7d:c5:80:0e:ec:fd:8d:38:57:2b:
         b3:10:63:3f:73:48:f8:4a:64:0b:e6:a3:1d:69:82:be:08:59:
         35:6e:6d:cd:39:18:74:97:ac:92:a8:d7:1a:33:75:a1:dc:35:
         c2:1f:a0:38:72:37:1b:39:65:e0:52:e5:4e:93:16:35:5b:d6:
         e0:a2:6f:ee:d1:2f:c5:49:b1:11:aa:95:08:ad:53:5a:e8:ab:
         0b:9a:d0:ed:c3:a7:63:6c:1e:90:dc:be:47:51:bd:be:43:2b:
         3f:2b:7a:98:20:8b:fc:de:6d:e5:ee:ee:ce:a1:ce:3c:f9:3f:
         d1:05:24:a9:8b:1d:43:95:bf:96:e6:cc:1d:f4:b2:d6:5c:2e:
         57:31:86:71:95:7d:31:a6:92:b5:fb:ee:f6:1d:70:3f:7e:09:
         b5:0d:23:92:19:9c:9b:46:cc:2c:23:4d:bc:aa:aa:f0:a5:b1:
         c6:1c:64:3a:c7:f2:e5:68:c2:4c:ab:28:34:c2:da:cf:90:e9:
         32:4c:fe:03:3e:50:81:6d:54:11:b9:d5:f2:53:87:23:1f:2c:
         dc:28:a0:fd:ca:75:d4:ef:17:ee:67:43:9c:aa:7f:c9:b0:4a:
         9b:7d:02:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEWqrR3Gy5Bm8W8UhiK4Y1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjYxMDA3MTQwMDQ4WhcNMjYxMDA4MTQwMDQ4WjAzMTEwLwYDVQQD
EyhiM2JmMGE4NjkwNjhkMjcxZmM1OTEzZTY4ODQzY2E4YjcyZDE5MTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpMDy6P6RQSaifjWMSIZaVcLFos8
qxONN3nr5EYotG4i9XTgzEJqTgSjPIwYr9x1gNYlF3lJMnCtmDMZf7QXEtzkw54i
RZa0xproQSMPxWerO3svoYhLcJIZMhY2M6SH3zzYE84dx3qWhuAWP2esB7LLMt7E
jj1HjVUrQ3cVi4ASIHPKeCC8BhRONmKlj2/d2dkXMAxY1FIaPPJEiG9E65P5D4fi
c+NkCtb7VvR+uoOPsVAx4onaB12MPT6s9iRWVAyBZe9JL6gFRbwupeikBCj7r6Jc
8Mmj5wjE+tx06pxyDopn203cLIP5Uh2z6kOH2R2eifrOFIQRWPm0X1+rUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLO/CoaQaNJx/FkT5ohDyoty0ZFYMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWmWh49M
4RIq2Ny/mudGNUm15oQ0niX8M6J9xYAO7P2NOFcrsxBjP3NI+EpkC+ajHWmCvghZ
NW5tzTkYdJeskqjXGjN1odw1wh+gOHI3Gzll4FLlTpMWNVvW4KJv7tEvxUmxEaqV
CK1TWuirC5rQ7cOnY2wekNy+R1G9vkMrPyt6mCCL/N5t5e7uzqHOPPk/0QUkqYsd
Q5W/lubMHfSy1lwuVzGGcZV9MaaStfvu9h1wP34JtQ0jkhmcm0bMLCNNvKqq8KWx
xhxkOsfy5WjCTKsoNMLaz5DpMkz+Az5QgW1UEbnV8lOHIx8s3Cig/cp11O8X7mdD
nKp/ybBKm30CyQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:01:54 2026 by rpki-client